From 7b0937e3aeadb60d48d57ef439ebfb87df8a15f1 Mon Sep 17 00:00:00 2001 From: Alexander Ebert Date: Mon, 22 Jul 2013 15:43:18 +0200 Subject: [PATCH] Fixed potential XSS vulnerability in confirm messages --- wcfsetup/install/files/js/WCF.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wcfsetup/install/files/js/WCF.js b/wcfsetup/install/files/js/WCF.js index 553cc05503..1df4699399 100755 --- a/wcfsetup/install/files/js/WCF.js +++ b/wcfsetup/install/files/js/WCF.js @@ -5921,7 +5921,7 @@ WCF.System.Confirmation = { template.appendTo(this._dialog.find('#wcfSystemConfirmationContent').show()); } - this._dialog.find('p').html(message); + this._dialog.find('p').text(message); this._dialog.wcfDialog({ onClose: $.proxy(this._close, this), onShow: $.proxy(this._show, this), -- 2.20.1